CVE-2011-5007

Name: CVE-2011-5007
Creator: NVD / NIST
Published: 2011-12-25T01:55:04.647+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 73.20%

Last modified Jun 16, 2026

CVE-2011-5007 is a vulnerability of currently unknown severity. Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.. EPSS estimates a 73.20% chance of exploitation in the next 30 days.

Description

Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.

Metrics

EPSS Probability

73.20%

99.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions	Update
3ssoftware	Codesys	<= 3.4	Sp4

References

http://aluigi.altervista.org/adv/codesys_1-adv.txt
http://ics-cert.us-cert.gov/advisories/ICSA-12-320-01
http://osvdb.org/77387
http://seclists.org/bugtraq/2011/Nov/178
http://secunia.com/advisories/47018Vendor Advisory
http://www.exploit-db.com/exploits/18187Exploit
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01.pdfUS Government Resource
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdfUS Government Resource
http://aluigi.altervista.org/adv/codesys_1-adv.txt
http://ics-cert.us-cert.gov/advisories/ICSA-12-320-01
http://osvdb.org/77387
http://seclists.org/bugtraq/2011/Nov/178
http://secunia.com/advisories/47018Vendor Advisory
http://www.exploit-db.com/exploits/18187Exploit
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01.pdfUS Government Resource
http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdfUS Government Resource

Timeline

Published: Dec 25, 2011
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2011-5007?

How severe is CVE-2011-5007?

Severity scoring for CVE-2011-5007 is pending analysis. The EPSS model estimates a 73.20% probability of exploitation in the next 30 days.

How do I fix CVE-2011-5007?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2011-5007?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST